Add: generate token in-process in icktool

1 files changed, 22 insertions, 2 deletions

diff --git a/icktool b/icktool
index b47b851..9cea74a 100755
--- a/icktool
+++ b/icktool
@@ -18,8 +18,11 @@
 import json
 import logging
 import sys
+import time
 
+import apifw
 import cliapp
+import Crypto.PublicKey.RSA
 import requests
 
 import ick2
@@ -341,9 +344,26 @@ class TokenGenerator:
         assert self._cmd is not None
         assert self._scopes is not None
 
+        # These should agree with how ick controller is configured.
+        # See the Ansible playbook. They should probably be
+        # configurable.
+        iss = 'localhost'
+        aud = 'localhost'
+
         privkey = cliapp.runcmd(['sh', '-c', self._cmd])
-        token = cliapp.runcmd(
-            ['./create-token', ' '.join(self._scopes)], feed_stdin=privkey)
+        key = Crypto.PublicKey.RSA.importKey(privkey)
+        scopes = ' '.join(self._scopes)
+
+        now = time.time()
+        claims = {
+            'iss': iss,
+            'sub': 'subject-uuid',
+            'aud': aud,
+            'exp': now + 86400,  # FIXME: This is silly long
+            'scope': scopes,
+        }
+
+        token = apifw.create_token(claims, key)
         return token.decode('ascii')